Egovernment

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-36531 MEDIUM POC This Month

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection PHP RCE Egovernment Nukeviet

NVD

CVSS 3.1

5.7

EPSS

0.4%

CVE-2024-36528 PHP HIGH POC This Week

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization RCE PHP Egovernment Nukeviet

NVD

CVSS 3.1

8.8

EPSS

0.8%

CVE-2024-36531

EPSS 0% CVSS 5.7

MEDIUM POC This Month

Code Injection PHP RCE +2

NVD

CVE-2024-36528 PHP

EPSS 1% CVSS 8.8

HIGH POC This Week

Deserialization RCE PHP +2

NVD